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(57) Abstract 
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Arrangement for secure communication and key 
distribution in a telecommunication system 
FIELD OP THE INVENTION 

The present invention relates to telecommuni- 
cation, m particular, the invention concerns a new 
s type of method and system for secure routing of xnfor 
5 type 01 n service and the parties to 

mation and addressing of a service an 
a service in a telecommunication system. 

BACKGROUND OF THE INVENTION 

Mobile stations used in mobile communication 
. rks e g the GSM network (GSM, Global System for 
TOM —ations) . have considerable advantages 
as compared with wired-network telephones. The great 
est Vantage is naturally mobility. The use of a mo- 
15 bile station is not dependent on location. 

Traditionally, the main purpose of a tele 
nhone subscription and the associated terminal equip- 
P T is to set up and maintain a speech connection, 
ment is to set u P limited to the 

use of a mobile station is ^J^^ _ 

2 0 transmission of ^'^^^ Varlous 8e rvices 
continuously being developed for it. var 
Lsed on « r r -e t 

J a S sT h e data transmission 

25 "mobile' stations is ^^IZ^rZ^ 
telephones will be capable of real time 

of o£ leading telecommunication and in- 

formation technology enterprises nave ^eloped a 
30 technique which can be used to establish a wireless 
connection between a mobile Btation and e 
able computer. This technique is called B 
„d it is based on short-range radio technology, al 
t l„v types of terminal equipment to be inter- 

lowing many types oi tech- 
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The Bluetooth technology allows the intercon- 
nection of different devices via a short-range radio 
link Using Bluetooth technology, it is possible e.g. 
to establish a connection between a mobile station and 
a portable computer without cumbersome cabling. Print- 
ers, workstations, telefax devices, keyboards and vir- 
tually any digital equipment may form part of a Blue- 
tooth system or network. This technology constitutes a 
universal bridge to existing data networks and periph- 
erals and it makes it possible to form small private 
groups via interconnected devices without a fixed net- 
work infrastructure. Moreover, encryption and authen- 
tication can be used between the devices e.g. so that 
only a certain user's mobile station may be used in 
connection with a given portable computer. With Blue- 
tooth, it is possible to use a mobile station for the 
control of almost any device. 

As is known, mobile stations can be used to 
carry out various purchase or control transactions. A 
purchase transaction may consist of e.g. the selection 
of and payment for a product in various automated ma- 
chines by using a mobile station. The growth of the 
range of services associated with mobile stations in- 
volves a new area. The information to be transmitted 
is often of a nature that requires that the informa- 
tion be only accessible to the receiver and the 
sender. It is necessary to provide data security e.g. 
by employing various encryption methods. 

Often the place to which the data regarding a 
purchase or control transaction needs to be transmit- 
ted is not located in the vicinity of the actual place 
of performance of the purchase or control transaction. 
There arises the problem of transmitting the informa- 
tion related to the transaction to a central system in 
a manner as easy and reliable as possible. In addi- 
tion, at the receiving end it is necessary to be able 
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to verify an absolute correctness of the information 
received and to establish the identity of the sender. 

At present, the problem is how to address a 
service party's service apparatus and a given service 
5 produced by it. A further problem is how to implement 
the communication associated with the. service transac- 
tion and its routing in a secure manner between the 
parties to the service transaction. 

The object of the present invention is to 
10 eliminate the drawbacks referred to above or at least 
to significantly alleviate them. 

A specific object of the invention is to dis- 
close a new type of method and system for addressing a 
service apparatus and a given service associated with 
15 it by using a telecommunication terminal, preferably a 
mobile station. Furthermore, by applying the present 
invention, a service request can be safely routed to a 
service provider. The present invention provides a so- 
lution for global transmission of remittances from a 
20 telecommunication terminal to a payee. 

As for the features characteristic of the 
present invention, reference is made to the claims. 

BRIEF DESCRIPTION OF THE INVENTION 

25 The method of the present invention concerns 

the routing of information and secure addressing of a 
service and the parties to a service in a telecommuni- 
cation system. The system comprises a telecommunica- 
tion terminal, telecommunication network, a service 

30 provider connected to the telecommunication network 
and a service apparatus connected to the telecommuni- 
cation network. In addition, the system comprises a 
communication link provided between the telecommunica- 
tion terminal and the service apparatus. 
35 m the method of the present invention, the 

telecommunication terminal functions as a selector of 
a desired service. The telecommunication terminal, 
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preferably a mobile station, is connected to the serv- 
ice apparatus via the convocation link. The cr- 
eation link may be implemented using Bluetooth tech- 
nology as described above. This communication link 
permits the application of required encryption methods 
to prevent the information transmitted from getting m 
a useful form into the hands of outsiders. If e.g. 
Bluetooth technology is employed in the communication 
link the connection is assigned during connection 
setup a one-time identifier for associating the inter- 
cepting parties with each other. "t«t^ 
the communication link may consist of e.g. an infrared 
link. The information to be transmitted can be en- 
crypted by means of the telecommunication terminal, 
15 wnlch preferably is a mobile station. In this case^ 
the actual encryption of the information transmitted 
is performed e.g. by means of a subscriber identity 
»dL. The subscriber identity module contains the 
keys required for encryption and/or signature of the 

20 information. ^ 

The service apparatus receives the encrypted 

me ssage from the telecommuaication terminal ^* rt ° f . 
the message may consist of a service provider 
work address determined by the terminal. The network 
address may also be determined in the service appara- 
tus when it is known which service is meant. Based on 
the network address, the message is transmitted to the 
service provider. The network address is F»f«Uy « 
internet IP address (IP, Internet Protocol) The IP 
address does not actually define the receiving ma- 
chine; rather, it defines the connection interface un- 
ambiguously in the whole world. It was stated above 
that the telecommunication network is the Internet. 
However, this is only one example of possible imple- 
35 mentations. The telecommunication network may alterna- 
tively be e.g. a bank payment network. 
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in the method, the telecommunication terminal 
H/or the service apparatus and/or the service pro- 
by itTs assigned an unambiguous identifier 

fntifier ^ be associated with predetermined 
This identxtxer mdy . ^ 

encryption and/or signing Keys. For * -wu £ 
Inflation, the information received fro™ the tele 

-ia Pticrvoted and/ or signed us 
communication terminal is encryptea 

nTThe keys associated with the service apparatus 
and/or se^ice-specific unambiguous identifier, and 
, Z encr^ed and/or signed information is sent over 
Te te™unication network to the service provider 
To a n™ address determined by the telecon^ica- 
to a network appara tus. When the service 

tion terminal or service a Pt > 

provider receives the encrypted message «- 
5 needed for its decryption can be determined on the ba 
5 s lfo ( the identifier forming part of the message in 
"•rice the implementation may be such that the 
! rvlce 'protderld/or service apparatus c^unioates 

! ° rrrrernSninTthe encryption and/or signing 
keys associated with each identif ier 

From the trusted third party, the servi 
receives information regarding the keys asso- 
P T ith a given identifier, preferably a public 
25 cxated with » 9"«\ The service apparatus. 

re— - - — third -z: 

Ten the" encryption and signature of t^«-^« 
implemented using a public ^ method Jhefhent 
,0 itv of the message can be reliably verified. 

basis of the identifier, the service apparatus and/or 
""ice that the identifier itself is associated with 
can be determined. The service apparatus may be e^g. 
Tsh machine, a cash system, a computer or an auto 
35 mated ^ce ^chine ^ ^ ^ 

sages and the management of the keys, preferably pub- 
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lie and secret Keys, associated with the 
^ lamented using a specific « 
• =„nh a security nodule, it is possible to aaa 
rLe " enciptioj and message authentication even 
t o equipment in which this feature is originally ab- 

3ent ' The selected service may comprise response 
and/or control information from the service provider 
T the service apparatus and/or telecommunication ter- 
„r ^service apparatus can be controlled on the 
5 Tsfs' T Response sent by the service provider. 
Moreover, information about the progress of ~~ 
ice can be sent to the terminal . An example of this is 
a ca^bere a telecommunication terminal is used e.g. 

a case where aer vice request is sent from 

5 as a means of payment. A service m „rvice 
the terminal to the service provider and the service 
provider informs the terminal about succ ess « 
of the service. Payment arrangements may additionally 
of the serv requiring that the payment transac- 

LaraX confirmed. Confirmation is acco.- 
!0 -T * - telecommunication terminal 

- ' se^s Peci^ - i^ - oo^in a^ 
rate message to the service y short 
here means e.g. an encrypted SMS message (SMS. ^Short 
2 S Message Service, . Having interpreted the SMS messag 
received, the service provider sends to the servic 
„oaratus a permission to carry out the service, 
apparatus*^ Lmple of the protocol to be used between 
the telecommunication terminal and the service pre. 
30 vider is the WAP (Wireless Application Protocol) . The 
£ protocol defines a standard Jor ^ 
viding services to terminals in a J"" 1 
using the WAP protocol, it is possible e.g. " 

' telephone connection to a WWW server. In addi 
Ush a teleph M . 

35 aoe, which is the description language of the WAP 
^ofocol - used in function with a WAP implemen- 
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tation WML is a description language resembling the 
HTML language (HTML. Hypertext Markup Language), 
adapted for a wireless environment. 

The system of the present invention comprxses 
means for providing a telecommunication terminal with 
an unambiguous terminal -specific identifier, means for 
addressing a given service apparatus by means of a 
telecommunication terminal by sending from the tele- 
communication terminal a predetermined connection 
, setup request to the given service apparatus, means 
for providing the service apparatus and/or the service 
mediated by it with an unambiguous service-specif xc 
identifier, said identifier being associated wxth pre- 
determined encryption and/or signing keys, and means 
5 for sending the service provider's network address and 
other information relating to the selected servxce 
from the telecommunication terminal to the servxce ap- 
paratus via a communication link. 

The system further comprises means for ad- 
0 dressing a given service apparatus by means of a tele- 
communication terminal by sending from the telecommu- 
nication terminal a predetermined connection setup re- 
quest to a given service apparatus via a communicatxon 
link in addition, the system comprises means for en- 
25 crypting and/or signing the information received from 
the telecommunication terminal using keys assocxated 
with the service-specific and/or service apparatus- 
specific identifier and means for sending encrypted 
and/or signed information via the telecommunxcatxon 
30 network to the service provider to a network address 
determined by the telecommunication termxnal and/or 

service apparatus. 

The system of the present invention comprxses 
means for controlling the service apparatus on the ba- 
35 sis of information sent by the service provider and 
means for sending confirmation and/or other informa- 
tion from the service provider to the service appara- 
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t-„ a and/or to the telecommunication terminal. The sys- 
tem ^her comprises means for sending a message con- 
tern furthe mp transaction from the telecommuni- 
f irmxng the *^ ce der if a pre deter- 

cation terminal ^ means for accep ting 

r^^Ct only «hen the service a P - 
the required servi ce provider. a confirma- 

n9rat . u8 receives from tne servi^ * 

fion code confirming the service transaction. In addi- 
tion, the system comprises means for encrypts the 

3 ^^system of the present invention comprises 
a trusted third party which communicates with the 
LrvTce apparatus and/or service provider over the 
servrce «W rk . Father, the servrce pro- 

^r^or service apparatus comprises means for 
s vrder and/or ^ * m ina uiry . regard- 

Z Z eno^io" and/or signing Keys associated with 
eac h -^ 8 r:rntion has m»ny advantage. By 
20 appiying the invention, it is possihie to address a 
• ^ oo-rvice apparatus assocxated witn 
TiZ IZZ mediated by it and a given telecommuni- 
gl ven ^thermore. the invention makes rt 

catl on termrna^ ^ 

T th a selected service and to send to the serv- 
25 ated with a seiecteu r-^latinq to the 

ice provider encrypted information gating 

18 l0W ' : ion between the service apparatus and 

the communication between cn exis ting data 

the service provider takes place in an existing 
network, e.g. the Internet. 

35 

LIST OP ILLUSTRATIONS 

in the following, the invention will be de- 
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scribed in detail by the aid of a few examples of its 

embodiments, wherein „„«„ a 
Fig. 1 presents a preferred system according 

to the invention, and 

Fig 2 presents a flow diagram representing 
the operation of a preferred example -of the system of 
the present invention. 

DETAILED DESCRIPTION OF THE INVENTION 

A system as presented in Fig. 1 comprises a 
telecommunication terminal, a service 

a service provider BP. The ^"^J^^ 
! is connected via a communication link 5 to the serv 
ice apparatus 4. The telecommunication terminal ^ 1 is 
5 preferably a mobile station. The communication link 5 
"Te g. a connection based on Bluetooth technol- 
Z * : service apparatus 4 and the service provider 
s f are connected to a telecommunication networks The 
SP are co networ k 2 is preferably the global 

telecommunication network * . . .„ 

,0 internet networlc. Alternatively, the teleoonrounrcat.on 
«* 2 may be e. 3 . a ban* payment networlc Use of 
The internet has the advanta 9 e that the networX ^covers 
a very large area and that the devices attached to it 
can be unambiguously identified. 

The receiver of a service request » indi 
cated using a networlc address which is set * — 
tb. telecommunication terminal 1 or the serv.ce appa- 
ratus 4; in this example^headdressis^nj^^d 

aresfa. j . .„,-k-; nnniwl v de- 



30 



35 



dress. «y ^ sent is ^iguously de- 

the service request: oemy 

£ined ' The service provider SP identifies the send- 
ing service apparatus 4 by a globaliy 
identifier included in the message. The xdentrfrer « 
dt^ates the message decryption Keys associated w.th 
the identifier, m addition, based on the ^fier 
the service provider SP is able to send the service 
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apparatus 4 a response to the service request if nec- 
essary For each service apparatus-specific identi- 
fier, the service provider SP knows an unambiguous 

network address. 

The telecommunication terminal 1 comprises 
means 6 for providing it with a terminal-specific un- 
ambiguous identifier and means 7 for addressing a 
given service apparatus by sending from the terminal 1 
a predetermined connection setup request to the serv- 
D ice apparatus 4. Using means 9, the service provider's 
network address and/or other information relating to 
the service is sent to the service apparatus 4 via the 
communication link 5. Using means 10, a given service 
apparatus 4 is addressed via the communication link 5. 
5 Moreover, the telecommunication terminal 1 comprises 
means 15 for sending a confirmation message confirming 
the service transaction to the service provider SP. 
Using means 1? , the communication 5 can be encrypted 

The service apparatus 4 comprises means 8 for 
,0 providing the service apparatus and/or the service me- 
diated by it with an unambiguous identifier, said 
identifier being associated with predetermined encryp- 
tion and/or signing keys. Using means 11, the informa- 
tion received from the telecommunication terminal 1 is 
25 encrypted using the keys associated with the service- 
specific and/or service apparatus -specific identifier. 
Further, using means 12, the encrypted information is 
sent via the telecommunication network 2 to the serv- 
ice provider. The service apparatus 4 additionally 
30 comprises means 13 for controlling the service appara- 
tus 4 on the basis of information sent by the service 
provider SP. Using means 16, the required service is 
only accepted when the service apparatus 4 receives 
from the service provider SP a confirmation code for 

35 the service transaction. 

The service provider SP comprises means 14 
for sending confirmation and/or other information to 
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the service apparatus 4 and/or to the telecommunica- 
tion terminal 1. Using means 18, a query asking for 
the encryption and/or signing keys associated with 
each unambiguous identifier is sent to a trusted third 
5 party. 

Fig. 2 presents a preferred example of a flow 
diagram showing the steps comprised in a service ac- 
cording to the invention. The client establishes a 
communication connection to a service apparatus of his 

10 selection, block 20. The communication connection be- 
tween the terminal and the service apparatus is estab- 
lished e.g. via a Bluetooth link. As indicated in 
block 21, the client selects a desired service and the 
associated parameters by means of his terminal. The 

15 service is e.g. payment of a bill at the cash desk of 
a store. A service request is sent via the communica- 
tion link to the service apparatus, block 22. A commu- 
nication connection using Bluetooth technology in- 
cludes encryption of the communication. After all the 

20 information required for the service has been received 
from the telecommunication terminal, the operations 
required by the service itself are carried out, block 
23. 

For the service apparatus and/or the service 
25 produced by it, an unambiguous identifier linking a 
given service apparatus and the associated encryption 
keys together has been defined beforehand. Based on 
this identifier, the service provider knows where the 
message received comes from. The telecommunication 
30 terminal or the service apparatus adds the required 
network address to the message to be sent. The service 
apparatus encrypts the message and sends it to the 
service provider over a telecommunication network. In 
this example, the telecommunication network is a bank 

35 payment network. 

Using the decryption keys associated with the 
identifier, the service provider decrypts the received 
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message. To ensure an effective management of the 
keys, the database consisting of the identifiers and 
the associated decryption keys is maintained e.g. by a 
trusted third party. If the service request concerns a 
5 payment at a cash desk as in the above example, then 
in this case the service provider may be a bank. De- 
pending on the service, a decision is made whether a 
confirmation of execution of the service is to be sent 
or not, block 24. The service provider may send to the 
10 service apparatus or telecommunication terminal an en- 
crypted response to the service request, blocks 26 and 
27. The service may also be of a nature that requires 
no response, block 25. The service provider encrypts 
the message with his own secret signing key and fi- 
15 nally encrypts the entire message using a public en- 
cryption key associated with the service apparatus. 
The service apparatus has the required decryption keys 
for the deciphering of the message. As indicated in 
block 29, a confirmation for the execution of the 
20 service transaction can also be sent to the telecommu- 
nication terminal. According to the above description, 
the message sent may consist of information indicating 
that the bill was successfully paid. A confirmation of 
execution of the service need not necessarily be sent 
25 to the telecommunication terminal, block 28. 

In an embodiment as illustrated in Fig. 1, 
the service in question is a cash service. Each cash 
register terminal in the store is provided with commu- 
nication equipment consistent with the Bluetooth tech- 
nology. Further, the terminal equipment of the client 
using the cash service has the readiness for Bluetooth 
communication. In this example, the client's terminal 
is a mobile station. The client wants to pay for his 
shopping by using a Bluetooth interface. Since the 
35 maximum range of a Bluetooth connection varies from 
ten meters to a few tens of meters depending on the 
case, there may be several cash register terminals 
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within that area which are capable of receiving radio 
signals. Therefore, the client needs to individuate 
the cash register terminal with which a connection is 
to be established. The Bluetooth technology includes 
5 encryption of radio communication, so information can 
be securely transferred via the wireless link. The mo- 
bile station individuates the selected cash register 
terminal e.g. by sending a signal containing the num- 
ber of the cash register terminal. The connection is 
10 assigned a temporary identifier by which the communi- 
cating parties identify each other. Alternatively, the 
mobile station contains e.g. an electronic component 
which is identified by the cash register terminal when 
the mobile station is moved at a sufficiently short 
15 distance from the cash register terminal. 

Via the Bluetooth link, the cash register 
terminal sends the information it has received about 
the service to the service provider. The service pro- 
vider in this example is a bank. The service informa- 
tion includes e.g. the account to be charged, service 
provider address data, the sum to be charged and other 
possible information relevant to the particular serv- 
ice. The service provider is individuated by means of 
a given predetermined network address. This address is 
25 included in the information provided in the mobile 
station prior to the service transaction. Alterna- 
tively, the network address may be determined by the 
cash register terminal. The information transmitted 
between the cash register terminal and the service 
provider is encrypted to prevent misuse. The informa- 
tion is encrypted using encryption keys specific to 
the service apparatus and/or service. The service pro- 
vider possesses the keys required for the decryption 
of the information transmitted. 

The user of the service has to confirm the 
service request if the amount to be paid exceeds a 
certain limit, e.g. $ 50. For the confirmation, the 
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service provider sends via the cash register terminal 
to the mobile station a confirmation reference, which 
the mobile station has to return to the service pro- 
vider e.g. in an SMS message. The user includes the 
confirmation code in the message, encrypts and/or 
signs the message and sends the encrypted message to 
the service provider. The service provider decrypts 
the message and thus verifies the identity of the user 
and interprets the information contained in the mes- 
sage. The service provider sends the user a message 
indicating successful remittance of the payment e.g. 
over the Bluetooth link via the cash register termi- 
nal. 

In an embodiment as illustrated in Fig. 1» 
15 the method of the invention is applied in an automatic 
gas station in conjunction with refueling. The client 
wants to fill the fuel tank of a company car. The com- 
pany car has been fitted with a Bluetooth communica- 
tion device. When the car arrives at the filling 
place, the communication device sets up a radio con- 
nection with the automatic filling machine. The commu- 
nication device in the car contains information in- 
cluding the account of the company, the network ad- 
dress of the service provider (bank) and other possi- 
ble information. The client confirms the payment 
transaction using a predetermined identifier. This en- 
sures that a person illicitly using the car will not 
be able to refuel the car on the company's account. 
The communication between the automatic filling ma- 
chine and the service provider is encrypted using an 
encryption key associated with the filling machine. 
The service provider transmits a response message to 
the filling machine, which sends it further to the 
communication device in the client's company car. 

The invention is not restricted to the exam- 
ples of its embodiments described above; instead, many 
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variations are possible within the scope of the inven- 
tive idea defined in the claims. 
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CLAIMS 

1. Method for secure routing of information 
and addressing of a service and the parties to the 
service in a telecommunication system comprising 
5 a telecommunication terminal (1) , 

a telecommunication network (2) , 

a service provider (SP) connected to the telecom- 
munication network (2) , 

a service apparatus (4) connected to the telecom- 
10 munication network (2) , 

a communication link (5) provided between the 
telecommunication terminal (1) and the service appara- 
tus (4), 

characterized in that the method 

15 comprises the steps of: 

providing the telecommunication terminal (1) with 
a terminal -specific unambiguous identifier; 

addressing a given service apparatus (4) by means 
of the telecommunication terminal (1) by sending a 
20 predetermined connection setup request from the termi- 
nal (1) to the given service apparatus (4); 

providing the service apparatus (4) and/or the 
service mediated by it with a service-specific unambi- 
guous identifier, said identifier being associated 
25 with predetermined encryption and/or signing keys; and 
sending the service provider's (SP) network ad- 
dress and/or other information relating to the se- 
lected service from the telecommunication terminal (1) 
to the service apparatus (4) via the communication 
30 link (5) . 

2. Method as defined in claim 1, char- 
acterized in that the given service apparatus 
(4) is addressed by means of the telecommunication 
terminal (1) by sending from the telecommunication 
35 terminal (1) a predetermined connection setup request 
to the given service apparatus (4) via the communica- 
tion link (5) - 
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3. Method as defined in claim 1 or 2, 
characterized in that 

the information received from the telecommunica- 
tion terminal (1) is encrypted and/or signed by using 
5 the keys associated with the service -specific and/or 
service apparatus -specific identifier;, and 

the encrypted and/ or signed information is sent 
over the telecommunication network (2) to the service 
provider (SP) to an address determined by the telecom- 

10 munication terminal (1) . 

4. Method as defined in any one of the pre- 
ceding claims 1-3, characterized in that 
the service apparatus (4) is controlled on the basis 
of information sent by the service provider (SP) . 

15 5. Method as defined in any one of the pre- 

ceding claims 1-4, characterized in that 
confirmation and/or other information is sent from the 
service provider (SP) to the service apparatus (4) 
and/or to the telecommunication terminal (1) . 

2 0 6. Method as defined in any one of the pre- 

ceding claims 1-5, characterized in that 
a message confirming the service transaction is sent 
by the telecommunication terminal (1) to the service 
provider (SP) if a predetermined condition is ful- 

25 filled. 

7. Method as defined in any one of the pre- 
ceding claims 1-6, characterized in that 
a message confirming the service transaction is sent 
by the telecommunication terminal (1) to the service 

30 provider (SP) in the form of an SMS message. 

8. Method as defined in any one of the pre- 
ceding claims 1-7, characterized in that 
the service request is only accepted after the service 
apparatus (4) has received from the service provider 

35 (SP) a confirmation code for the service transaction. 

9. Method as defined in any one of the pre- 
ceding claims 1-8, characterized in that 
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the communication connection (5) is a link based on 
Bluetooth technology. 

10. Method as defined in any one of the pre- 
ceding claims 1-9, characterized in that 

5 the communication connection (5) is an infrared link. 

11. Method as defined in any one of the pre- 
ceding claims 1-10, characterized in that 
the communication connection (5) is encrypted. 

12. Method as defined in any one of the pre- 
10 ceding claims 1-11, characterized in that 

a public key and/or private key encryption and/or 
signing method is applied. 

13. Method as defined in any one of the pre- 
ceding claims 1-12, characterized in that 

15 the WAP is used between the telecommunication terminal 
(1) and the service apparatus (4) and/or the service 

provider (SP) - 

14. Method as defined in any one of the pre- 
ceding claims 1-13, characterized in that 
the service provider communicates with a trusted third 
party, which third party maintains a database which 
containing the encryption and/or signing keys associ- 
ated with each identifier. 

15. Method as defined in any one of the pre- 
25 ceding claims 1-14, characterized in that 

the service provider (SP) and/or the service apparatus 
(4) sends to the trusted third party an inquiry asking 
for the encryption and/or signing keys associated with 
each unambiguous identifier. 
30 i6. Method as defined in any one of the pre- 

ceding claims 1-15, characterized in that 
the network address is an IP address. 

17. System for secure routing of information 
and addressing of a service and the parties to the 
35 service in a telecommunication system comprising 
a telecommunication terminal (1) , 
a telecommunication network (2) , 
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a service provider (SP) connected to the telecom- 
munication network (2) , 

a service apparatus (4) connected to the telecom- 
munication network (2) , 
5 a communication link (5) provided between the 

telecommunication terminal (1) and the service appara- 
tus (4) . 

characterized in that the system 
comprises : 

10 means (6) for providing the telecommunication ter- 

minal (1) with a terminal -specific unambiguous identi- 
fier; 

means (7) for addressing a given service apparatus 
(4) by means of the telecommunication terminal (1) by 
15 sending a predetermined connection setup request from 
the terminal (1) to the given service apparatus (4) ; 

means (8) for providing the service apparatus (4) 
and/or the service mediated by it with a service- 
specific unambiguous identifier, said identifier being 
20 associated with predetermined encryption and/or sign- 
ing keys; and 

means (9) for sending the service provider's (5) 
network address and/or other information relating to 
the selected service from the telecommunication termi- 
25 nal (1) to the service apparatus (4) via the communi- 
cation link (5) . 

18. System as defined in claim 17, char- 
acterized in that the system comprises means 
(10) for addressing a given service apparatus (4) us- 

30 ing the telecommunication terminal (1) by sending from 
the telecommunication terminal (1) a predetermined 
connection setup request to the given service appara- 
tus (4) via the communication link (5) . 

19. System as defined in claim 17 or 18, 
35 characterized in that the system comprises 

means (11) for encrypting and/or signing the in- 
formation received from the telecommunication terminal 
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(1) using the keys associated with the service- 
specific and/or service apparatus-specific identifier; 
and 

means (12) for sending the encrypted and/or signed 
5 information over the telecommunication network (2) to 
the service provider (SP) to a network address deter- 
mined by the telecommunication terminal (1) and/or the 
service apparatus (4) - 

20. System as defined in any one of the pre- 
10 ceding claims 17 - 19, characterized in 

that the system comprises means (13) for controlling 
the service apparatus (4) on the basis of information 
sent by the service provider (SP) . 

21. System as defined in any one of the pre- 
ceding claims 17 - 20, characterized in 
that the system comprises means (14) for sending con- 
firmation and/or other information from the service 
provider (SP) to the service apparatus (4) and/or to 
the telecommunication terminal (1) . 

22. System as defined in any one of the pre- 
ceding claims 17 - 21, characterized in 
that the system comprises means (15) for sending a 
message confirming the service transaction from the 
telecommunication terminal (1) to the service provider 

25 (SP) if a predetermined condition is fulfilled. 

23 . System as defined in any one of the pre- 
ceding claims 17 - 22, characterized in 
that the system comprises means (16) for only accept- 
ing a service request after the service apparatus (4) 

30 has received from the service provider (SP) a confir- 
mation code for the service transaction. 

24. System as defined in any one of the pre- 
ceding claims 17 - 23, characterized in 
that the system comprises means (17) for encrypting 

35 the communication connection (5) . 

25. System as defined in any one of the pre- 
ceding claims 17 - 24, characterized in 
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that the system comprises a trusted third party which 
communicates with the service apparatus (4) and/or the 
service provider (SP) over the telecommunication net- 
work (2) . 

26. System as defined in any one of the pre- 
ceding claims 17 - 25, characterized in 
that the service provider (SP) and/or the service ap- 
paratus (4) comprises means (18) for sending to the 
trusted third party an inquiry asking for the encryp- 
tion and/or signing keys associated with each unambi- 
guous identifier. 

27. System as defined in any one of the pre- 
ceding claims 17 - 26, characterized in 
that the telecommunication terminal (1) is a mobxle 
station with a subscriber identity module connected to 

it. 

28. System as defined in any one of the pre- 
ceding claims 17-27, characterized in 
that the service apparatus (4) is an automatic teller 

) machine. 

29. System as defined in any one of the pre- 
ceding claims 17-27, characterized in 
that the service apparatus (4) is a cash register sys- 



tern. 



30. System as defined in any one of the pre- 
ceding claims 17-27, characterized in 
that the service apparatus (4) is a computer. 

31. System as defined in any one of the pre- 
ceding claims 17-27, characterized in 

0 that the service apparatus (4) is an automated service 
machine, e.g. an automatic gasoline filling machine. 

32. System as defined in any one of the pre- 
ceding claims 17-31, characterized in 
that the telecommunication network (2) is the Internet 

>5 network. 

33. System as defined in any one of the pre- 
ceding claims 17-31, characterized in 
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that the telecommunication network (2) is a bank pay- 
ment network. 
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